[Bug 1987674] [NEW] rustc: expose vendored sources information

[Simon Chopin]

Public bug reported:

As part of the MIR for rustc, it was agreed that we should expose the
precise version of the vendored dependencies for the package in a way
that's easily exploitable. For now, the chosen approach will be to
publish them in a Vendored-Sources-Rust field in the source control
file, making it greppable in the published Source archive file. See
https://github.com/cpaelzer/ubuntu-mir/pull/3

** Affects: rustc (Ubuntu)
     Importance: High
     Assignee: Simon Chopin (schopin)
         Status: In Progress

** Changed in: rustc (Ubuntu)
       Status: Confirmed => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rustc in Ubuntu.
https://bugs.launchpad.net/bugs/1987674

Title:
  rustc: expose vendored sources information

Status in rustc package in Ubuntu:
  In Progress

Bug description:
  As part of the MIR for rustc, it was agreed that we should expose the
  precise version of the vendored dependencies for the package in a way
  that's easily exploitable. For now, the chosen approach will be to
  publish them in a Vendored-Sources-Rust field in the source control
  file, making it greppable in the published Source archive file. See
  https://github.com/cpaelzer/ubuntu-mir/pull/3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rustc/+bug/1987674/+subscriptions